Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File:                     AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier:          f49rzzOnLjsDwEth3U6B077mwtZFONCTtRtIv4Ztzas=
Subject key identifier:   CB:A2:69:8D:89:6A:01:3E:69:B9:09:0B:C2:03:22:78:7D:88:7A:96
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer:       /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial:       0193576477C05D4D67CCBF56B11B76537B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 05:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:22 +0000
Files and hashes:         1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: p15WBkYfvZ1GMMjPPzHQGLZzRCREtBBfASnM9OaYpHU=)
                          2: CtY1kk6SrmIGR2KvlRbqyX-EhaE.roa (hash: CiumMJrDIb+dFgkujqGoN/JY0Qu2eBMImM/1k5F435k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:77:c0:5d:4d:67:cc:bf:56:b1:1b:76:53:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
        Validity
            Not Before: Nov 23 05:00:22 2024 GMT
            Not After : Nov 24 05:00:22 2024 GMT
        Subject: CN=cba2698d896a013e69b9090bc20322787d887a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:58:3a:b3:40:1a:ed:c6:19:f3:97:b5:77:
                    5d:8f:5a:70:84:4e:4e:19:fb:9e:ee:14:fd:ac:5d:
                    12:42:83:3c:c8:b9:9c:9b:c3:63:13:ee:47:08:1a:
                    30:16:02:a5:54:a1:83:81:77:89:9e:23:c6:92:49:
                    bc:01:1a:40:8d:e4:6f:fb:94:69:d5:94:9c:ad:a6:
                    86:3c:80:0e:67:07:52:2e:00:7b:ce:e3:c5:84:04:
                    11:4d:92:77:49:d0:b7:95:00:45:53:50:d3:24:3c:
                    8d:c0:9a:ac:a7:f2:08:b5:9d:ba:9f:b8:ec:35:e2:
                    4d:bc:49:30:ab:8f:af:b4:2c:34:fd:84:fc:7c:c7:
                    42:e0:e9:90:26:fe:a4:5b:a9:84:4e:4d:0f:ee:01:
                    d5:07:44:1b:ac:e0:f1:6d:87:09:ef:82:64:d7:54:
                    7b:98:11:da:84:35:06:ea:d1:62:27:5f:59:8f:8f:
                    68:c9:b5:de:62:ac:a1:9c:29:64:82:a9:97:28:84:
                    32:ee:93:5f:16:b1:42:bb:d5:62:3e:0b:4b:2e:94:
                    65:5c:45:5a:32:9c:6d:de:74:76:1c:53:24:f1:79:
                    39:c5:85:8e:04:58:32:3e:48:f9:9f:ee:79:14:e0:
                    5a:a0:72:55:a6:3f:67:a0:7e:05:9e:aa:c0:d5:a4:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:69:8D:89:6A:01:3E:69:B9:09:0B:C2:03:22:78:7D:88:7A:96
            X509v3 Authority Key Identifier:
                keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:16:39:2c:d8:7a:31:ea:85:ce:f6:82:68:94:e1:6e:fe:
         e1:61:7f:b2:9f:61:fb:71:98:be:01:ff:d3:88:36:f9:42:2f:
         e5:f6:42:8f:cb:d1:02:a0:3a:ed:47:29:35:20:a9:e1:6e:a0:
         86:a7:9a:b6:f9:da:f1:11:87:44:66:9e:63:dc:97:48:5b:b3:
         7f:7c:da:26:d1:94:3f:94:82:96:df:65:09:5e:99:e1:19:a2:
         31:ce:dd:69:39:92:fa:8a:29:50:51:ac:25:ed:2e:b6:94:d5:
         1f:d3:91:5f:bc:ec:96:97:19:88:c5:3f:94:2b:e4:72:80:2a:
         32:ee:73:41:83:a9:1b:2f:a3:61:42:12:66:2e:23:8d:4c:ad:
         3a:60:31:f9:44:24:34:1d:31:4e:b6:0f:40:dc:52:16:16:e7:
         5f:f8:3a:06:36:78:7a:f7:db:56:a9:2b:49:6c:4e:50:c7:bc:
         77:ee:e4:a3:3d:a9:ff:79:2e:1f:84:61:ef:96:0d:18:1e:0d:
         63:d0:ba:b0:27:aa:f6:6d:e0:04:e1:5d:3d:3d:1b:f7:e3:de:
         14:0a:d1:c6:66:92:5b:ef:59:da:eb:e6:8a:7d:b6:36:51:04:
         2e:f8:b1:ad:c6:96:76:58:1f:ba:29:89:6d:26:6c:a8:02:7d:
         42:38:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:12 2024 by rpki-client on console-ams.rpki-client.org